CVE-2025-0112

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This vulnerability can also be leveraged by malware to disable the Cortex XDR agent and then perform malicious activit...

CVE-2024-12284

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

CVE-2024-12284

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

CVE-2024-12284

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

PT-2025-7534 · Ping Identity · Pingam Java Policy Agent

Name of the Vulnerable Software and Affected Versions: PingAM Java Policy Agent versions through 5.10.3 PingAM Java Policy Agent versions through 2023.11.1 PingAM Java Policy Agent versions through 2024.9 Description: The issue is a Relative Path Traversal vulnerability in Ping Identity PingAM Ja...

Ping Identity PingAM 安全漏洞

Ping Identity PingAM is an authentication, access management program from Ping Identity USA. A security vulnerability exists in Ping Identity PingAM that stems from a relative path traversal vulnerability contained in the Java Policy Agent...

CVE-2025-0112 Cortex XDR Agent: Local Windows User Can Disable the Agent

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This vulnerability can also be leveraged by malware to disable the Cortex XDR agent and then perform malicious activit...

CVE-2024-12284

CVE-2024-12284 affects Citrix NetScaler Console and NetScaler Agent. The issue is an authenticated privilege escalation via an Arbitrary File Write (ZipSlip) vulnerability in the StyleBook import flow, where an archive is unpacked without validating paths, allowing writing as root and potentially...

CVE-2024-12284 Authenticated privilege escalation

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

CVE-2024-12284 Authenticated privilege escalation

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows...

Citrix Systems NetScaler Console和NetScaler Agent 安全漏洞

Citrix Systems NetScaler Console and Citrix Systems NetScaler Agent are both products of Citrix Systems, U.S.A. Citrix Systems NetScaler Console is a single, unified and centralized cloud-based The Citrix Systems NetScaler Console is a single, unified and centralized cloud-based console Citrix...

SUSE SLES12 Security Update : google-osconfig-agent (SUSE-SU-2025:0580-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:0580-1 advisory. - CVE-2024-45339: github.com/golang/glog: a privileged process' log file path can be easily predicted and used to overwrite other sensitive...

Palo Alto Networks Cortex XDR 代码问题漏洞

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, USA. A code issue vulnerability exists in Palo Alto Networks Cortex XDR, which stems from a faulty detection mechanism that...

PT-2025-7474 · Wss Agent +1 · Wss Agent +1

Name of the Vulnerable Software and Affected Versions: Symantec Diagnostic Tool SymDiag versions prior to 3.0.79 Description: The issue is a Privilege Escalation vulnerability that may affect Symantec Diagnostic Tool SymDiag. It is only applicable to the combination of SymDiag and the WSS Agent...

Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: CVE-2024-45339: github.com/golang/glog: a privileged process' log file path can be easily predicted and used to overwrite other sensitive files in a system. bsc1236560 Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2025:0580-1 Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: - CVE-2024-45339: github.com/golang/glog: a privileged process' log file path can be easily predicted and used to overwrite other sensitive files in a system. bsc1236560...

OPENSUSE-SU-2025:14815-1 google-osconfig-agent-20250115.01-2.1 on GA media

These are all security issues fixed in the google-osconfig-agent-20250115.01-2.1 package on the GA media of openSUSE Tumbleweed...

caldera -- Remote Code Execution

MITRE Caldera contributor report: In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution RCE vulnerability was found in the dynamic agent implant compilation functionality of the server. This allows remote attackers to execute arbitrary code on the server that Caldera is...

Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0

Impact The Keylime registrar implemented more strict type checking on version 7.12.0. As a result, when updated to version 7.12.0, the registrar will not accept the format of the data previously stored in the database by versions = 7.8.0, raising an exception. This makes the Keylime registrar...

GHSA-9JXQ-5X44-GX23 Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0

Impact The Keylime registrar implemented more strict type checking on version 7.12.0. As a result, when updated to version 7.12.0, the registrar will not accept the format of the data previously stored in the database by versions = 7.8.0, raising an exception. This makes the Keylime registrar...